According to docs it only takes in your data schema and outputs the SQL query to run, so the AI model doesn't actually get information about your data, just the schema. Otherwise data is handled according to SOC II principles similar to any other BI tools.